CVE-2021-29256
. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.
Published:May 24, 2021
Last Modified:Nov 3, 2025
EPS:May 24, 2021
EPSS Score:0.00976
CVSS Score:8.8
CISA Notification
Description
. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.
Required Action:
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Notes:
No extra notes provided.
Due Date
Jul 28, 2023
1141 days ago
Alert Date
Jul 7, 2023
1162 days ago
Affected Products
Vendor
Product
Action
Vendor
Arm
Product
Bifrost Gpu Kernel Driver
Arm
Bifrost Gpu Kernel Driver
Vendor
Arm
Product
Midgard Gpu Kernel Driver
Arm
Midgard Gpu Kernel Driver
Vendor
Arm
Product
Valhall Gpu Kernel Driver
Arm
Valhall Gpu Kernel Driver
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
